pilotlynx 0.0.1 → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 PilotLynx Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,345 @@
+# PilotLynx
+
+[![npm version](https://img.shields.io/npm/v/pilotlynx.svg)](https://www.npmjs.com/package/pilotlynx)
+[![CI](https://github.com/pilotlynx/pilotlynx/actions/workflows/ci.yml/badge.svg)](https://github.com/pilotlynx/pilotlynx/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D20-brightgreen.svg)](https://nodejs.org/)
+
+Local monorepo orchestration for Claude Agent SDK workflows. One CLI to manage project scaffolding, policy-gated secrets, cron scheduling, and cross-project self-improvement.
+
+## What Makes PilotLynx Different
+
+Three features that don't exist in other AI workflow tools:
+
+### Cron Ping
+
+Define cron schedules per project. PilotLynx uses tick-based scheduling — no daemon, no background process. You run `plynx schedule tick` from a system cron entry and it figures out what's due.
+
+**`schedule.yaml`** (in each project):
+
+```yaml
+schedules:
+  - workflow: daily_feedback
+    cron: "0 9 * * *"
+    timezone: America/New_York
+    catchUpPolicy: run_latest
+```
+
+**How a tick works:**
+
+1. Read every project's `schedule.yaml`
+2. Compare cron expressions against last recorded run times
+3. Apply the catch-up policy to any missed runs
+4. Execute due workflows and record the new last-run time
+
+**Catch-up policies** (when the machine was off or tick didn't fire):
+
+| Policy | Behavior |
+|--------|----------|
+| `run_latest` | Run only the most recent missed occurrence (default) |
+| `run_all` | Run every missed occurrence in order |
+| `skip` | Discard all missed runs, wait for the next future occurrence |
+
+Missed runs older than **7 days** are always discarded regardless of policy.
+
+`plynx init` auto-installs a system cron entry (`*/15 * * * *`) so scheduling works out of the box. Each tick also runs the self-improvement loop automatically (once per 24h, configurable).
+
+```bash
+plynx schedule status myproject   # see what's scheduled, last/next runs
+```
+
+### Self-Improvement Loop
+
+`plynx improve` triggers a two-phase cycle that makes projects learn from their own run history:
+
+**Phase 1 — Observation (Lynx-owned, read-only):** Reads conversation logs, user feedback, and run outcomes across all projects. Produces per-project summaries and cross-project insights (stored in `pilotlynx/shared/insights/`).
+
+**Phase 2 — Improvement (project-owned, Lynx-triggered):** Invokes each project's `daily_feedback` workflow with the distilled summary. The project's own agent decides what to update — brief, runbook, skills, or memory.
+
+Key design constraint: **Lynx never writes project files.** The orchestrator observes and triggers; only the project's own agent modifies its files.
+
+Auto-runs via `schedule tick` once per 24h. Manual trigger anytime with `plynx improve`. Toggle in `plynx.yaml`:
+
+```yaml
+autoImprove:
+  enabled: false   # default: true
+```
+
+```bash
+plynx insights                    # view cross-project insights
+plynx insights --since 2025-01-10 # filter by date
+```
+
+### Shared Env
+
+One `.env` file, per-project allowlists. A project sees only the secrets its policy permits — injected at runtime, never written to files.
+
+**`pilotlynx/shared/policies/secrets-access.yaml`:**
+
+```yaml
+version: 1
+shared:
+  - ANTHROPIC_API_KEY         # every project gets this
+
+projects:
+  my-web-app:
+    allowed:
+      - GITHUB_TOKEN
+      - DATABASE_URL
+    mappings:
+      SLACK_URL: SLACK_WEBHOOK  # project sees SLACK_URL, sourced from .env's SLACK_WEBHOOK
+
+  my-cli-tool:
+    allowed:
+      - GITHUB_TOKEN
+```
+
+**Inspect and export:**
+
+```bash
+plynx env myproject              # dotenv format
+plynx env myproject --export     # export KEY=value (eval-able)
+plynx env myproject --json       # {"KEY": "value"}
+plynx link myproject --direnv    # generate .envrc for MCP server ${VAR} expansion
+```
+
+**Auto-migration:** When you adopt an existing project with `plynx project add`, PilotLynx detects secrets in the project's `.env` and `.mcp.json` literals, consolidates them into the central store, and updates the policy — no manual copy-paste.
+
+**Default is deny-all.** No policy file = zero secrets injected. See [`docs/secrets-and-mcp.md`](docs/secrets-and-mcp.md) for the full guide.
+
+## Why PilotLynx
+
+PilotLynx occupies a specific niche: **workspace-level orchestration of isolated Claude Agent SDK projects**. No single existing tool covers this combination. Here's how it compares:
+
+| Tool | What it solves | What PilotLynx adds |
+|------|---------------|---------------------|
+| [Claude Agent SDK](https://docs.anthropic.com/en/docs/agents) | Build individual AI agents in TypeScript | Multi-project orchestration, scaffolding, shared secrets, scheduling |
+| [OpenClaw](https://github.com/openclaw/openclaw) | General-purpose personal AI assistant (email, calendar, web) with 20+ messaging integrations | Developer-focused CLI for code projects, policy-gated secrets, template-based scaffolding, cross-project self-improvement |
+| [CrewAI](https://github.com/crewAIInc/crewAI) | Multi-agent collaboration with role-based agents (Python) | File-based durable state in git, project isolation, TypeScript-native with Agent SDK |
+| [LangGraph](https://github.com/langchain-ai/langgraph) | Stateful multi-step agent graphs | Workspace-level concerns: secrets policy, cron scheduling, cross-project insights |
+| [Turborepo](https://turbo.build/repo) | Monorepo build orchestration and caching | AI workflow orchestration, not build — schedules agents, injects secrets, tracks run logs |
+| [AgentStack](https://github.com/AgentOps-AI/AgentStack) | Scaffolding for CrewAI/LangGraph projects | Claude Agent SDK native, multi-project workspace, self-improvement loop |
+| [Infisical](https://infisical.com/) | Secrets management platform | Lightweight file-based secrets with per-project allowlists, no external service |
+
+**What PilotLynx uniquely combines:**
+- CLI-first developer workflow (not conversation-first, not GUI-first)
+- Claude Agent SDK native — every CLI command is an agent
+- Multi-project isolation with shared infrastructure (secrets, policies, insights)
+- Tick-based cron scheduling with catch-up policies
+- Cross-project self-improvement loop
+- All state in committed files — no database, no external service
+
+## Requirements
+
+- **Node.js** 20 or later
+- **Authentication** (one of the following):
+  - **Anthropic API key** — set `ANTHROPIC_API_KEY` in `pilotlynx/.env`
+  - **Claude Code subscription** (Pro / Max / Teams) — run `claude login` once. No API key needed; the Agent SDK reads OAuth tokens from `~/.claude/` automatically.
+- **Claude Code** (optional) — PilotLynx works standalone, but each CLI command also maps to a Claude Code skill for in-editor use
+
+## Install
+
+```bash
+npm install -g pilotlynx
+```
+
+> **Permission denied?** If you see `EACCES` errors, either prefix with `sudo` or (recommended) use a Node version manager like [nvm](https://github.com/nvm-sh/nvm) / [fnm](https://github.com/Schniz/fnm) which installs to user-owned directories. You can also run without installing globally:
+>
+> ```bash
+> npx pilotlynx <command>
+> ```
+
+## Quick Start
+
+### 1. Create a workspace
+
+```bash
+mkdir my-agents && cd my-agents
+plynx init --name my-agents
+```
+
+This creates:
+
+```
+my-agents/
+  pilotlynx/              # config directory
+    plynx.yaml            # workspace marker
+    projects.yaml         # project registry (name → path)
+    template/             # project scaffold template
+    shared/policies/      # secrets + tool access policies
+    shared/docs/          # shared documentation
+    shared/insights/      # cross-project learnings
+    .gitignore
+```
+
+It also writes a global config at `~/.config/pilotlynx/config.yaml` (Linux) so the CLI works from any directory, and installs a cron entry for `plynx schedule tick` every 15 minutes.
+
+### 2. Create or add a project
+
+```bash
+# Create a new project from template
+plynx project create myproject
+
+# Or adopt an existing directory (at any path)
+plynx project add myrepo --path /path/to/existing/repo
+```
+
+`create` scaffolds from the template into `myproject/` (at the workspace root) with:
+- `CLAUDE.md` — project rules
+- `PROJECT_BRIEF.md` — goals and decisions
+- `RUNBOOK.md` — operational procedures
+- `workflows/` — TypeScript Agent SDK workflow files
+- `memory/` — durable knowledge (committed to git)
+
+`add` adopts an existing directory: adds missing scaffolding files without overwriting anything, registers the project, migrates detected secrets into the central store, then runs an interactive agent that examines the existing code and helps fill in project docs.
+
+Both commands register the project in `pilotlynx/projects.yaml` and prompt for secrets access configuration.
+
+### 3. Run a workflow
+
+```bash
+plynx run myproject daily_feedback
+```
+
+Loads secrets from `.env` per the project's allowlist, then executes the workflow.
+
+### 4. Check project structure
+
+```bash
+plynx verify myproject
+```
+
+Reports missing files or directories.
+
+## Commands
+
+| Command | What it does |
+|---------|-------------|
+| `plynx init` | Create a new workspace |
+| `plynx project create <name>` | Scaffold a project from template |
+| `plynx project add <name> --path <dir>` | Add an existing directory as a project |
+| `plynx projects list` | List all projects with paths |
+| `plynx run <project> <workflow>` | Run a workflow with secrets injection |
+| `plynx verify <project>` | Validate project structure |
+| `plynx improve` | Run self-improvement loop across projects |
+| `plynx schedule tick` | Run due scheduled workflows |
+| `plynx schedule status <project>` | Show schedules, last/next run times, auto-improve state |
+| `plynx logs <project>` | View recent run logs (`--last`, `--workflow`, `--failures`) |
+| `plynx insights` | View cross-project insights (`--last`, `--since`) |
+| `plynx sync template <project>` | Apply template updates to a project |
+| `plynx env <project>` | Output policy-filtered secrets (`--export`, `--json`, `--envrc`) |
+| `plynx link <project>` | Configure a project for direct access (`--direnv` for `.envrc`) |
+| `plynx unlink <project>` | Remove direct-access configuration |
+
+## Other Features
+
+- Every CLI command is a Claude Agent SDK agent — the CLI is a thin wrapper with no business logic
+- Bounded workflows with clear start/end — no long-lived sessions, failed runs rerun deterministically
+- All state is committed files — briefs, runbooks, skills, memory in git, zero dependence on session state
+- Scoped context — workflows see only their project directory plus shared docs/insights
+- No external plugins — all skills are local, committed, and code-reviewable
+- Tool access policies independent from secrets policies (defense-in-depth)
+- Filesystem sandboxing via bwrap (Linux) and sandbox-exec (macOS)
+
+## Architecture: CLI = Agent SDK
+
+The CLI is a thin wrapper around Claude Agent SDK agents. Every `plynx` command invokes a dedicated agent, making the CLI a convenience layer rather than the primary execution surface.
+
+- **Each command = one agent.** `plynx project create foo` runs a "project-create" agent that scaffolds the directory from the template.
+- **Most CLI commands have corresponding Claude Code skills** for use inside projects.
+- **Business logic lives in agents.** Exception: `plynx init` scaffolds the workspace directly since no workspace exists yet for agent context.
+
+## Working Directly in a Project
+
+PilotLynx stores its config location in a global file (`~/.config/pilotlynx/config.yaml` on Linux, OS-appropriate on macOS/Windows) so the CLI works from any directory — no need to be inside the workspace.
+
+For MCP servers that need secrets via `${VAR}` expansion, use [direnv](https://direnv.net/):
+
+```bash
+plynx link myproject --direnv   # generates .envrc with policy-filtered secrets
+cd myproject && direnv allow     # activate
+```
+
+The `.envrc` is gitignored. Regenerate it when secrets change.
+
+## Project Registry
+
+Projects are tracked in `pilotlynx/projects.yaml`:
+
+```yaml
+version: 1
+projects:
+  my-app:
+    path: my-app                          # relative to workspace root
+  external-repo:
+    path: /home/user/repos/external-repo  # absolute path
+```
+
+Paths under the workspace root are stored as relative; paths outside are stored as absolute. This keeps the registry portable — move the workspace and relative paths still resolve.
+
+## Project Structure
+
+Every project follows the same layout:
+
+```
+myproject/
+  CLAUDE.md               # project-specific agent rules
+  PROJECT_BRIEF.md        # goals, decisions, constraints
+  RUNBOOK.md              # how to operate this project
+  .mcp.json               # MCP server config
+  .claude/settings.json   # shared project permissions
+  .claude/skills/         # project-scoped skills
+  .claude/rules/          # modular topic-specific rules
+  workflows/              # TypeScript Agent SDK workflows
+  memory/MEMORY.md        # durable knowledge entrypoint (git-tracked)
+  artifacts/              # output files (gitignored)
+  logs/                   # run logs (gitignored)
+  schedule.yaml           # cron schedules for workflows
+```
+
+## Workflows
+
+Each project has workflows under `workflows/` — TypeScript scripts that run Claude Agent SDK.
+
+### Execution Model
+
+- Bounded, isolated runs with a clear start and end.
+- Each run produces a logged outcome: success or failure, plus a short summary.
+- Failed workflows support deterministic rerun with the same inputs.
+- Retries are bounded and explicit — no infinite retry loops.
+
+### Standard Workflows
+
+Each project should support these baseline workflows:
+
+| Workflow | Purpose |
+|----------|---------|
+| `daily_feedback` | Review recent activity and update project memory |
+| `task_execute` | Execute a specific task from prompt input |
+| `project_review` | Produce a short project status update |
+
+## Security Model
+
+- Project workflows operate inside their project folder and must not access other project directories.
+- Secrets are injected via env and never stored in committed files.
+- No external skills marketplace — all skills are local and committed.
+- Tool access is policy-gated — secrets allowlists and tool allowlists are independent controls (defense-in-depth).
+
+## Claude Code Compatibility
+
+- The workspace can be opened directly in Claude Code.
+- `plynx` works from the workspace root, from project directories (via global config), and from any other location.
+- `plynx link --direnv` generates `.envrc` for MCP servers that need secrets via `${VAR}` expansion.
+- Each CLI command maps to a Claude Code skill — same agent, same behavior.
+
+## Design Decisions
+
+**Minimal dependencies (11 total).** Each dependency earns its place: `commander` for CLI parsing, `chalk` for terminal colors, `cli-table3` for table output, `croner` for cron parsing, `yaml`/`zod` for config, `dotenv` for secrets loading, `env-paths` for OS-appropriate config paths, `proper-lockfile` for concurrent tick safety, `grammy` for Telegram relay, and `@anthropic-ai/claude-agent-sdk` for the core runtime. No ORMs, no template engines, no framework overhead.
+
+**File-based state over databases.** All state — project briefs, runbooks, skills, memory, run logs, schedule state — lives in committed files. This makes workspaces portable, git-friendly, and inspectable with standard tools. No database to provision or migrate.
+
+**Simple template interpolation over template engines.** Project scaffolding uses direct file copying with string replacement rather than Handlebars/EJS/etc. This avoids a class of injection vulnerabilities and keeps templates readable as plain files.
+
+## License
+
+MIT

package/dist/agents/improve.agent.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from '../lib/types.js';
+export declare function getImproveAgentConfig(logSummaries: Record<string, string>): AgentConfig;

package/dist/agents/improve.agent.js

@@ -0,0 +1,54 @@
+import { getWorkspaceRoot, ENV_FILE } from '../lib/config.js';
+import { loadPrompt, loadSystemPrompt } from '../lib/prompts.js';
+import { resolve, dirname } from 'node:path';
+function improveToolCallback() {
+    const envFile = resolve(ENV_FILE());
+    const envDir = dirname(envFile);
+    return async (toolName, input) => {
+        const filePath = input?.file_path ?? input?.path;
+        if (filePath) {
+            const resolved = resolve(filePath);
+            // Deny access to .env files in config root
+            if (resolved === envFile || /[/\\]\.env(\..+)?$/.test(resolved)) {
+                if (resolved.startsWith(envDir)) {
+                    return { behavior: 'deny', message: 'Cannot access .env files' };
+                }
+            }
+        }
+        return { behavior: 'allow', updatedInput: input };
+    };
+}
+export function getImproveAgentConfig(logSummaries) {
+    const summaryText = Object.entries(logSummaries)
+        .map(([project, summary]) => `## ${project}\n${summary}`)
+        .join('\n\n');
+    return {
+        prompt: loadPrompt('improve', 'improve_analyze', { summaryText }),
+        cwd: getWorkspaceRoot(),
+        allowedTools: ['Read', 'Glob', 'Grep'],
+        // Intentional: uses string systemPrompt (not preset 'claude_code') because
+        // this agent is read-only and doesn't need CLAUDE.md context or Claude Code tools.
+        systemPrompt: loadSystemPrompt('improve', 'improve_analyze'),
+        maxTurns: 10,
+        canUseTool: improveToolCallback(),
+        outputFormat: {
+            type: 'json_schema',
+            schema: {
+                type: 'object',
+                properties: {
+                    projectFeedback: {
+                        type: 'object',
+                        description: 'Map of project name to feedback string',
+                        additionalProperties: { type: 'string' },
+                    },
+                    crossProjectInsights: {
+                        type: 'string',
+                        description: 'Abstract cross-project learnings, no project names or secrets',
+                    },
+                },
+                required: ['projectFeedback', 'crossProjectInsights'],
+            },
+        },
+    };
+}
+//# sourceMappingURL=improve.agent.js.map

package/dist/agents/improve.agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"improve.agent.js","sourceRoot":"","sources":["../../src/agents/improve.agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAc,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,SAAS,mBAAmB;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,KAAK,EAAE,QAAgB,EAAE,KAAc,EAA6B,EAAE;QAC3E,MAAM,QAAQ,GAAI,KAAa,EAAE,SAAS,IAAK,KAAa,EAAE,IAAI,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnC,2CAA2C;YAC3C,IAAI,QAAQ,KAAK,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChE,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,YAAoC;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,OAAO,KAAK,OAAO,EAAE,CAAC;SACxD,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhB,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,CAAC;QACjE,GAAG,EAAE,gBAAgB,EAAE;QACvB,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QACtC,2EAA2E;QAC3E,mFAAmF;QACnF,YAAY,EAAE,gBAAgB,CAAC,SAAS,EAAE,iBAAiB,CAAE;QAC7D,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,mBAAmB,EAAE;QACjC,YAAY,EAAE;YACZ,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,eAAe,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,wCAAwC;wBACrD,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBACzC;oBACD,oBAAoB,EAAE;wBACpB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+DAA+D;qBAC7E;iBACF;gBACD,QAAQ,EAAE,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;aACtD;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/agents/project-add.agent.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from '../lib/types.js';
+export declare function getProjectAddAgentConfig(name: string, availableSecretKeys: string[], currentSecretsPolicy: string, migrationSummary?: string): AgentConfig;

package/dist/agents/project-add.agent.js

@@ -0,0 +1,26 @@
+import { getProjectDir, POLICIES_DIR } from '../lib/config.js';
+import { loadPrompt } from '../lib/prompts.js';
+import { join } from 'node:path';
+import { projectSetupCallback } from '../lib/callbacks.js';
+export function getProjectAddAgentConfig(name, availableSecretKeys, currentSecretsPolicy, migrationSummary) {
+    const projectDir = getProjectDir(name);
+    return {
+        prompt: loadPrompt('project-add', 'project_add', {
+            name,
+            projectDir,
+            availableSecretKeys: availableSecretKeys.join(', ') || '(none configured)',
+            currentSecretsPolicy,
+            secretsPolicyPath: join(POLICIES_DIR(), 'secrets-access.yaml'),
+            migrationSummary: migrationSummary || '',
+        }),
+        cwd: projectDir,
+        additionalDirectories: [POLICIES_DIR()],
+        allowedTools: ['Read', 'Write', 'Edit', 'Glob', 'Grep', 'Bash', 'AskUserQuestion'],
+        settingSources: ['project'],
+        systemPrompt: { type: 'preset', preset: 'claude_code' },
+        permissionMode: 'acceptEdits',
+        maxTurns: 20,
+        canUseTool: projectSetupCallback(projectDir, POLICIES_DIR()),
+    };
+}
+//# sourceMappingURL=project-add.agent.js.map

package/dist/agents/project-add.agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-add.agent.js","sourceRoot":"","sources":["../../src/agents/project-add.agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,mBAA6B,EAC7B,oBAA4B,EAC5B,gBAAyB;IAEzB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,aAAa,EAAE,aAAa,EAAE;YAC/C,IAAI;YACJ,UAAU;YACV,mBAAmB,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB;YAC1E,oBAAoB;YACpB,iBAAiB,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC;YAC9D,gBAAgB,EAAE,gBAAgB,IAAI,EAAE;SACzC,CAAC;QACF,GAAG,EAAE,UAAU;QACf,qBAAqB,EAAE,CAAC,YAAY,EAAE,CAAC;QACvC,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC;QAClF,cAAc,EAAE,CAAC,SAAS,CAAC;QAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE;QACvD,cAAc,EAAE,aAAa;QAC7B,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/agents/project-create.agent.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from '../lib/types.js';
+export declare function getProjectCreateAgentConfig(name: string, availableSecretKeys?: string[], currentSecretsPolicy?: string): AgentConfig;

package/dist/agents/project-create.agent.js

@@ -0,0 +1,25 @@
+import { getProjectDir, POLICIES_DIR } from '../lib/config.js';
+import { loadPrompt } from '../lib/prompts.js';
+import { join } from 'node:path';
+import { projectSetupCallback } from '../lib/callbacks.js';
+export function getProjectCreateAgentConfig(name, availableSecretKeys = [], currentSecretsPolicy = '') {
+    const projectDir = getProjectDir(name);
+    return {
+        prompt: loadPrompt('project-create', 'project_create', {
+            name,
+            projectDir,
+            availableSecretKeys: availableSecretKeys.join(', ') || '(none configured)',
+            currentSecretsPolicy: currentSecretsPolicy || 'version: 1\nshared: []\nprojects: {}\n',
+            secretsPolicyPath: join(POLICIES_DIR(), 'secrets-access.yaml'),
+        }),
+        cwd: projectDir,
+        additionalDirectories: [POLICIES_DIR()],
+        allowedTools: ['Read', 'Write', 'Edit', 'Glob', 'Bash', 'AskUserQuestion'],
+        settingSources: ['project'],
+        systemPrompt: { type: 'preset', preset: 'claude_code' },
+        permissionMode: 'acceptEdits',
+        maxTurns: 20,
+        canUseTool: projectSetupCallback(projectDir, POLICIES_DIR()),
+    };
+}
+//# sourceMappingURL=project-create.agent.js.map

package/dist/agents/project-create.agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-create.agent.js","sourceRoot":"","sources":["../../src/agents/project-create.agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,sBAAgC,EAAE,EAClC,uBAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,gBAAgB,EAAE,gBAAgB,EAAE;YACrD,IAAI;YACJ,UAAU;YACV,mBAAmB,EAAE,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB;YAC1E,oBAAoB,EAAE,oBAAoB,IAAI,wCAAwC;YACtF,iBAAiB,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,qBAAqB,CAAC;SAC/D,CAAC;QACF,GAAG,EAAE,UAAU;QACf,qBAAqB,EAAE,CAAC,YAAY,EAAE,CAAC;QACvC,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC;QAC1E,cAAc,EAAE,CAAC,SAAS,CAAC;QAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE;QACvD,cAAc,EAAE,aAAa;QAC7B,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,oBAAoB,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/agents/run.agent.d.ts

@@ -0,0 +1,3 @@
+import type { AgentConfig } from '../lib/types.js';
+export { pathEnforcementCallback } from '../lib/callbacks.js';
+export declare function getRunAgentConfig(project: string, workflow: string, projectEnv: Record<string, string>, feedbackPrompt?: string): AgentConfig;

package/dist/agents/run.agent.js

@@ -0,0 +1,37 @@
+import { getProjectDir, SHARED_DOCS_DIR, INSIGHTS_DIR } from '../lib/config.js';
+import { buildProjectTools } from '../lib/tools.js';
+import { loadPrompt } from '../lib/prompts.js';
+import { detectSandbox } from '../lib/sandbox.js';
+import { pathEnforcementCallback } from '../lib/callbacks.js';
+export { pathEnforcementCallback } from '../lib/callbacks.js';
+export function getRunAgentConfig(project, workflow, projectEnv, feedbackPrompt) {
+    const projectDir = getProjectDir(project);
+    const toolPolicy = buildProjectTools(project);
+    const promptName = feedbackPrompt ? 'run_with_feedback' : 'run_default';
+    const vars = { workflow };
+    if (feedbackPrompt)
+        vars.feedback = feedbackPrompt;
+    const prompt = loadPrompt('run', promptName, vars);
+    const sandbox = detectSandbox();
+    if (sandbox.level === 'kernel') {
+        console.error(`[plynx] Filesystem sandbox: ${sandbox.mechanism} (kernel-level isolation)`);
+    }
+    else {
+        console.error('[plynx] Filesystem sandbox: regex-only (bwrap not available)');
+    }
+    return {
+        prompt,
+        cwd: projectDir,
+        additionalDirectories: [SHARED_DOCS_DIR(), INSIGHTS_DIR()],
+        env: projectEnv,
+        allowedTools: toolPolicy.allowedTools.length > 0 ? toolPolicy.allowedTools : undefined,
+        disallowedTools: toolPolicy.disallowedTools.length > 0 ? toolPolicy.disallowedTools : undefined,
+        settingSources: ['project'],
+        systemPrompt: { type: 'preset', preset: 'claude_code' },
+        permissionMode: 'bypassPermissions',
+        allowDangerouslySkipPermissions: true,
+        maxTurns: 50,
+        canUseTool: pathEnforcementCallback(projectDir, [SHARED_DOCS_DIR(), INSIGHTS_DIR()]),
+    };
+}
+//# sourceMappingURL=run.agent.js.map

package/dist/agents/run.agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.agent.js","sourceRoot":"","sources":["../../src/agents/run.agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,QAAgB,EAChB,UAAkC,EAClC,cAAuB;IAEvB,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC;IACxE,MAAM,IAAI,GAA2B,EAAE,QAAQ,EAAE,CAAC;IAClD,IAAI,cAAc;QAAE,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,+BAA+B,OAAO,CAAC,SAAS,2BAA2B,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,MAAM;QACN,GAAG,EAAE,UAAU;QACf,qBAAqB,EAAE,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC;QAC1D,GAAG,EAAE,UAAU;QACf,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACtF,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC/F,cAAc,EAAE,CAAC,SAAS,CAAC;QAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE;QACvD,cAAc,EAAE,mBAAmB;QACnC,+BAA+B,EAAE,IAAI;QACrC,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,uBAAuB,CAAC,UAAU,EAAE,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC"}

package/dist/agents/secrets-migration.agent.d.ts

@@ -0,0 +1,15 @@
+import type { AgentConfig } from '../lib/types.js';
+import type { MigrationPlan } from '../lib/secrets-migration.js';
+export interface MigrationAgentOutput {
+    approved: boolean;
+    conflictResolutions: Record<string, {
+        action: 'skip' | 'rename' | 'overwrite';
+        newName?: string;
+    }>;
+}
+interface SecretsMigrationInput {
+    projectName: string;
+    plan: MigrationPlan;
+}
+export declare function getSecretsMigrationAgentConfig(input: SecretsMigrationInput): AgentConfig;
+export {};

package/dist/agents/secrets-migration.agent.js

@@ -0,0 +1,63 @@
+import { loadPrompt, loadSystemPrompt } from '../lib/prompts.js';
+function formatKeyList(keys) {
+    if (keys.length === 0)
+        return '(none)';
+    return keys.map(k => `- ${k.key} (from ${k.source})`).join('\n');
+}
+export function getSecretsMigrationAgentConfig(input) {
+    const { projectName, plan } = input;
+    const newKeys = plan.keys.filter(k => k.category === 'new');
+    const deduped = plan.keys.filter(k => k.category === 'deduplicated');
+    const conflicts = plan.keys.filter(k => k.category === 'conflicting');
+    const mcpNote = plan.rewrittenMcpJson
+        ? 'Literal values in .mcp.json will be replaced with ${VAR} references for migrated keys.'
+        : '';
+    return {
+        prompt: loadPrompt('secrets-migration', 'secrets_migration_confirm', {
+            projectName,
+            totalMigratable: String(plan.keys.length),
+            newKeysCount: String(newKeys.length),
+            newKeysList: formatKeyList(newKeys),
+            dedupedCount: String(deduped.length),
+            dedupedList: formatKeyList(deduped),
+            conflictsCount: String(conflicts.length),
+            conflictsList: formatKeyList(conflicts),
+            mcpNote,
+        }),
+        systemPrompt: loadSystemPrompt('secrets-migration', 'secrets_migration_confirm'),
+        allowedTools: ['AskUserQuestion'],
+        maxTurns: 8,
+        outputFormat: {
+            type: 'json_schema',
+            schema: {
+                type: 'object',
+                properties: {
+                    approved: {
+                        type: 'boolean',
+                        description: 'Whether the user approved the migration',
+                    },
+                    conflictResolutions: {
+                        type: 'object',
+                        description: 'Resolution for each conflicting key',
+                        additionalProperties: {
+                            type: 'object',
+                            properties: {
+                                action: {
+                                    type: 'string',
+                                    enum: ['skip', 'rename', 'overwrite'],
+                                },
+                                newName: {
+                                    type: 'string',
+                                    description: 'New key name when action is rename',
+                                },
+                            },
+                            required: ['action'],
+                        },
+                    },
+                },
+                required: ['approved', 'conflictResolutions'],
+            },
+        },
+    };
+}
+//# sourceMappingURL=secrets-migration.agent.js.map

package/dist/agents/secrets-migration.agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-migration.agent.js","sourceRoot":"","sources":["../../src/agents/secrets-migration.agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAgBjE,SAAS,aAAa,CAAC,IAAuC;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAA4B;IACzE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB;QACnC,CAAC,CAAC,wFAAwF;QAC1F,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,mBAAmB,EAAE,2BAA2B,EAAE;YACnE,WAAW;YACX,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC;YACnC,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC;YACnC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YACxC,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC;YACvC,OAAO;SACR,CAAC;QACF,YAAY,EAAE,gBAAgB,CAAC,mBAAmB,EAAE,2BAA2B,CAAC;QAChF,YAAY,EAAE,CAAC,iBAAiB,CAAC;QACjC,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE;YACZ,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE;wBACR,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,yCAAyC;qBACvD;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,qCAAqC;wBAClD,oBAAoB,EAAE;4BACpB,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,MAAM,EAAE;oCACN,IAAI,EAAE,QAAQ;oCACd,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC;iCACtC;gCACD,OAAO,EAAE;oCACP,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,oCAAoC;iCAClD;6BACF;4BACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;yBACrB;qBACF;iBACF;gBACD,QAAQ,EAAE,CAAC,UAAU,EAAE,qBAAqB,CAAC;aAC9C;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/agents/sync-template.agent.d.ts

@@ -0,0 +1,2 @@
+import type { AgentConfig } from '../lib/types.js';
+export declare function getSyncTemplateAgentConfig(project: string): AgentConfig;